---
typeId: req
recordId: benac-auth-006
fields:
  title: Replay-resistant remote operations
  statement: Remote compute results, storage receipts, lease-bound operations, and
    authenticated remote claims shall be bound to request CIDs or profile-defined
    request identifiers, nonces or challenges, relevant lease identifiers,
    Station principals, package CIDs and invocation contract snapshot CIDs where applicable,
    output/evidence CIDs, and timestamps or sequence information.
  rationale: Authentication must prevent trivial substitution or replay of stale
    results and receipts.
  verification: Replay an old authenticated result with a new request or nonce and
    verify that Benac rejects it or records it as invalid.
  testable: true
  status: draft
  area: BENAC-AUTH
  sourceDocument: /home/johnb/Downloads/benac_syrs_v0_4_integrated_authentication.md
  sourceVersion: v0.4
  sourceSections:
    - 10.2 Authentication and authority boundaries
  order: 21
---
